I-RRAS ku-Azure VM ayisekelwe: hlola ngaphambi komklamo

Uvula iphothali, usabalalisa i-Windows Server 2022 kunethiwekhi engaphansi, futhi indima ye-Remote Access ifakwa ngaphandle kwezinkinga. Lolo chungechunge lubonisa ukuthi isifaki sisebenza, hhayi ukuthi i-Microsoft isekela lesi silungiselelo. Umhlahlandlela wokusekela wesofthiwe yeseva oshicilelwe wezinsimbi ezibonakalayo ze-Azure ufaka i-RRAS phakathi kwezici ze-Windows Server ezingasekelwe ku-Azure VM, futhi leso yisinqumo somklamo, hhayi imininingwane yokuxazulula izinkinga. Ithunge laphuma aliyisusi insiza ingene ngaphakathi komngcele wokusekela.

Umhlahlandlela ongezansi uqala ekhasini lokusekela, bese udlulela ezidingweni nasezinkethweni zokushintsha.

Qala ekhasini lokusekela, hhayi elebhu

Funda umhlahlandlela wokusekela we-Azure VM ngaphambi kokukala noma yini. Uhlukanisa imikhiqizo, izindima nezici ezisekelwe esikhundleni sokuthatha i-Windows Server njengebhulokhi eyodwa engahlukaniswanga. Qaphela ukuthi umthwalo womsebenzi ohlosiwe uwela kuwuphi umugqa ngempela, ngoba izingxenye ezimbili ezibonakala zihlobene kukhonsoli zingaba semigqeni ehlukene.

Bhala isicaphuno kudokhumenti yomklamo ngenkathi ikhasi livuliwe. Isimo sokusekela siyiqiniso elinomthombo, futhi ukubuyekezwa komklamo okungeke kukwazi ukusicaphuna kuzonqotshwa yilowo onombukiso.

Hlukanisa ukusekelwa kwe-OS kusuka ekusekelweni kwezindima nezici

Umhlahlandlela ofanayo ufaka i-Network Policy and Access Services phakathi kwezindima ezisekelwe kuyilapho ubala i-RRAS ngokwahlukile njengengasekelwe. Lezo zinto ezimbili zichaza izinto ezahlukene, futhi ukuzihlanganisa zibe “ukufinyelela kude kuyasekelwa” iyona ndlela umsebenzi wamukelwa ngayo ngokusekelwe ekufundeni okungalungile. Ukusekelwa kwesistimu yokusebenza akusho lutho mayelana neci elinomugqa walo.

Umkhawulo uphinde ube mncane kunalokho okucashunwa ngakho ngezinye izikhathi. Uphathelene naleyo nto esebenza ngaphakathi kwe-Azure VM; akusho ukuthi inethiwekhi yangasese ayikwazi ukuxhuma ku-Azure, futhi akusho ukuthi i-RRAS ayisekelwe yonke indawo. Ilebhu endala edlulisa amaphakethe ngendlela efanele iwubufakazi ngamaphakethe, hhayi ngesitatimende sokusekela.

Gcina leyo mibuzo emibili ihlukene kuso sonke isikhathi esisele somsebenzi: ingabe iyasebenza, futhi ingabe iyasekelwa. Uzodinga izimpendulo ezahlukene futhi ngezinye izikhathi abaphathi abahlukene kuyo ngayinye.

Bhala ukuthi umklamo kufanele wenze ini ngempela

Ngaphambi kokukhetha okunye, guqula uhlu lwezindawo lube yizidingo umkhiqizo ongakalwa ngazo:

• Amaphrothokholi ethunge asetshenziswa yimishini yamagatsha kakade, nokuthi ingabe ikhona indawo edinga ukuhamba kwemizila okuguqukayo.
• Iziqalo ezikude, kuhlanganise nanoma iyiphi indawo yekheli elihlangana nayo edinga ukuhunyushwa hhayi ukuhamba kwemizila.
• Ukushintshana kwemizila ne-Azure, nokuthi ubani ongumnikazi wokungena ngakunye kuthebula lemizila.
• Umthamo nenumbolo yokuxhumana okufanele kubekezelele ihora elimatasa kakhulu.
• Indlela yokudlulela lapho kwehluleka okuvunyelwene ngayo abanikazi bezindawo, hhayi kuphela lokho ongakwazi ukwakha.

I-NAT into eyeqiswa bese inquma wonke umklamo. Idivayisi ekwazi ukusungula i-IPsec ingahle ihumushe amakheli ngendlela ehlukile kunokufakwa kwe-RRAS ekushintshwayo, futhi lokho kushintsha lokho igatsha elikubona njengamakheli omthombo nalokho okubhalwa amalogi akho.

Yisa uhlu kubanikazi benethiwekhi futhi kuqinisekise ngaphambi kwanoma iyiphi ingxoxo yomkhiqizo. Izidingo ezingacacile ziguqula zonke iziqhathaniso zomthengisi zibe yimpikiswano yokuthanda.

Hlola okunye ngokumelene nalezo zidingo

Izinsizakalo zokuxhuma eziphethwe yi-Azure kanye namadivayisi enethiwekhi abonakalayo asekelwa abathengisi kufanele kokubili kunikezwe amaphuzu ngokumelene nohlu olulodwa. Ungacabangi ukuthi noma iyiphi yazo ilingana ngqo ne-RRAS VM ngenxa nje yokuthi ingaqeda i-IPsec: imodeli ye-NAT kanye nobunikazi bemizila kanye nomklamo wokutholakala okuphezulu kunquma ukuthi izindawo ezikhona zixhuma kanjani nokuthi izimpendulo zazo zibuyela kuphi. Nikeza amaphuzu kumuntu ngamunye ofake isicelo ephepheni ngokumelene nohlu futhi bhala ukuthi yiziphi izidingo angazifezi, ngoba lowo mbhalo wenza ukukhetha kuhlolwe kamuva.

Isilinganisi somthwalo phambi kwama-VM wamadivayisi amabili akusona ukutholakala okuphezulu ngokwako. Sinikeza ingaphambili, hhayi isimo sethunge esivumelanisiwe, futhi ukudlulela lapho kwehluleka okulahla yonke iseshini yisinqumo somklamo okufanele umuntu asithathe ngamabomu. Buza umthengisi wedivayisi ukuthi iyiphi iphethini ye-HA esekelwayo nokuthi ingabe iyahambisana nokutholakala okuthenjisiwe ezindaweni. Hlola ukudlulela ngaphambi kokuthi lezo zindawo zincike kukho, futhi thatha yonke iseshini elahlekile njengokutholakele hhayi isimanga.

Lapho isidingo silula ngempela — indawo eyodwa, isiqalo esisodwa, akukho ukuhlangana — insizakalo ephethwe ngokuvamile iyawina ngezindleko zokusebenza. Lapho ukuhunyushwa nokuhamba kwemizila okuguqukayo kokubili kusemdlalweni, indlela yedivayisi ingaba ukuphela kwayo efanele, futhi leso yisizathu sokuhlela ukufuduka okude esikhundleni sokugcina i-VM engasekelwe.

Uma i-RRAS VM isivele isebenza

Ukuthola akusona isizathu sokuyisusa. Hlela ushintsho eduze kokuncikile okuqoqwe yileyo VM: imizila okuncike kuyo amanye amanethiwekhi angaphansi, imithetho ye-NAT efihla amakheli omthombo, kanye nakho konke ukuqapha okufundile ukukulindela ekhelini layo. Gcina imizila edingekayo kanye nendlela yokubuyisela ehloliwe ngenkathi umgomo osekelwe uklanywa futhi uqinisekiswa eceleni.

Gcina ukusekeleka nokuxilongwa kobuchwepheshe kuyizitholakele ezihlukene ngaso sonke isikhathi. Isakhiwo esingasekelwe singaba nephutha elijwayelekile lokuhamba kwemizila, futhi ukulungisa lelo phutha akushintshi isimo salo sokusekela. Zombili izitatimende zingezombiko, futhi akukho okwedlula okunye.

Vala umhlahlandlela ngokubhala isicaphuno sokusekela, uhlu lwezidingo, okunye okukhethiwe kanye nokulandelana kokushintsha. Lezo zinto ezine yizona umhloli noma ilungu elisha leqembu elizokubuza ngazo kuqala.